> To maintain the performance of DNS, you'd want a connectionless protocol. What you're looking for is DNSCurve. The only reason people are interested in DNS

> To maintain the performance of DNS, you'd want a connectionless protocol. What you're looking for is DNSCurve. The only reason people are interested in DNS over TLS is the garbage middleboxes that intercept and interfere with DNS (and thereby break DNSCurve or anything like it), which typically don't interfere with TLS. If you could use an arbitrary protocol then it might as well be DNSCurve. If you can't then it has to be TLS. Even DNS over DTLS is people not realizing why TLS was used to begin with. It seems the thing to do is to default to DNSCurve and fallback to DNS over TLS/HTTPS if that fails.